$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/f36eecc9-79c6-3354-8f5a-fef8eb344e9f.roa File: f36eecc9-79c6-3354-8f5a-fef8eb344e9f.roa (raw, json) Hash identifier: Qj8T9wsemDv8e3d3Lj4hhp1YANm6iQmNI/IWC+Me8f0= Subject key identifier: F0:F1:6A:C0:42:D5:A8:62:03:41:F1:76:CB:C4:E8:93:8A:DF:27:76 Certificate issuer: /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09 Certificate serial: 010D0C9F4328584F4ADDDF63139FF3D5262D1E80 Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/f36eecc9-79c6-3354-8f5a-fef8eb344e9f.roa Signing time: Fri 25 Sep 2026 13:12:19 +0000 ROA not before: Fri 25 Sep 2026 13:12:19 +0000 ROA not after: Thu 24 Dec 2026 14:12:19 +0000 asID: 213683 IP address blocks: 2602:f700:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:dd:df:63:13:9f:f3:d5:26:2d:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09 Validity Not Before: Sep 25 13:12:19 2026 GMT Not After : Dec 24 14:12:19 2026 GMT Subject: CN=bd5fa364-07cc-4016-8371-853f1eb1d643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:b5:f8:30:9a:04:7e:75:26:c9:17:93:44: 6c:7b:3b:08:03:9e:ee:67:83:0c:ec:31:7c:e9:28: 8a:ee:05:25:a6:31:f1:b0:87:45:d5:c5:05:96:53: 07:82:0e:b4:0b:72:40:e0:6d:06:1b:fc:02:05:79: 43:79:1e:8d:65:c6:c0:ac:ef:eb:7b:c5:1e:01:2e: 82:ee:8e:03:5d:b0:68:4f:fa:da:a5:5f:2a:ae:dd: 84:07:49:7d:92:88:78:4b:bf:8c:dd:8a:53:10:2b: 0d:a7:04:5f:63:8d:f7:65:6e:b6:e7:30:5c:8f:6b: cf:b6:d8:fe:4b:12:a8:b4:db:5d:85:07:ee:b3:db: fe:4c:3c:97:ee:92:8c:03:94:39:ae:e2:cd:cc:d1: 02:20:93:87:db:95:1e:56:fa:42:09:eb:27:86:d5: ee:9f:cc:e9:00:7a:1d:1a:63:21:97:b6:e3:28:07: 41:56:e6:76:3c:d2:5f:cf:db:bd:38:18:99:5b:ef: d9:42:64:36:12:81:1a:43:e7:ba:15:24:56:34:46: a9:ef:c1:5b:2e:25:e7:1d:fc:58:e2:2b:db:04:ac: d8:46:13:11:d0:46:c0:ba:41:13:78:60:6c:8b:88: f4:8c:b9:7f:fa:1f:76:2b:1a:66:29:a2:d1:87:19: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F1:6A:C0:42:D5:A8:62:03:41:F1:76:CB:C4:E8:93:8A:DF:27:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/f36eecc9-79c6-3354-8f5a-fef8eb344e9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl X509v3 Authority Key Identifier: keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer sbgp-ipAddrBlock: critical IPv6: 2602:f700:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:9c:e4:ca:ed:37:e6:58:d0:a0:57:0a:27:6a:84:3d:99:2a: fb:70:ca:db:63:5f:f5:13:05:77:48:de:b4:98:b1:0d:9a:fd: 07:c7:4b:19:40:8e:3f:b2:f4:19:27:af:f1:07:2f:de:23:29: 73:9b:ec:25:f0:93:5e:5d:6e:29:fb:7a:a2:09:f6:a4:40:b2: 5b:f8:3b:fc:75:0f:3e:89:5a:d6:e7:1e:d3:7c:1b:f8:0a:31: 03:96:2d:4c:14:56:24:85:63:61:d0:3a:c3:1c:68:ca:eb:7e: be:e2:ba:4e:1b:0a:04:22:00:08:94:37:4a:6a:f8:8f:49:f1: 77:b0:54:f5:f3:04:e6:c6:9c:b4:8c:de:8a:7a:c4:c8:7d:0b: 8d:77:62:72:93:86:49:3b:83:f6:b6:3d:9d:ec:1a:4c:fa:d3: 67:f4:98:b3:4b:6e:ed:6f:a7:c9:0e:0b:d0:d8:dd:cb:07:16: 65:35:f4:09:25:15:3f:86:89:7e:41:62:ee:6d:0b:91:14:79: 0f:40:5d:f1:86:ee:3f:0e:1d:75:b5:00:3c:b7:a6:f3:22:4f: c5:5b:cd:bc:14:1f:97:0a:d9:16:a6:2f:90:6d:ee:3f:4e:9b: 22:c5:8f:4f:83:09:eb:0c:07:16:e3:d2:c0:9f:bb:1f:32:d2: 05:9e:4c:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9K3d9jE5/z1SYtHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM2NWU0NjAtMTYzMy00YjQ0LTlkYzUtYmUzMDNjOGIz ZjA5MB4XDTI2MDkyNTEzMTIxOVoXDTI2MTIyNDE0MTIxOVowLzEtMCsGA1UEAxMk YmQ1ZmEzNjQtMDdjYy00MDE2LTgzNzEtODUzZjFlYjFkNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl61+DCaBH51JskXk0RsezsIA57uZ4MM7DF8 6SiK7gUlpjHxsIdF1cUFllMHgg60C3JA4G0GG/wCBXlDeR6NZcbArO/re8UeAS6C 7o4DXbBoT/rapV8qrt2EB0l9koh4S7+M3YpTECsNpwRfY433ZW625zBcj2vPttj+ SxKotNtdhQfus9v+TDyX7pKMA5Q5ruLNzNECIJOH25UeVvpCCesnhtXun8zpAHod GmMhl7bjKAdBVuZ2PNJfz9u9OBiZW+/ZQmQ2EoEaQ+e6FSRWNEap78FbLiXnHfxY 4ivbBKzYRhMR0EbAukETeGBsi4j0jLl/+h92KxpmKaLRhxlE5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPDxasBC1ahiA0HxdsvE6JOK3yd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1 ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMwM2M4YjNmMDkvZjM2ZWVjYzktNzljNi0z MzU0LThmNWEtZmVmOGViMzQ0ZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWM2NWU0NjAtMTYzMy00YjQ0LTlk YzUtYmUzMDNjOGIzZjA5L2FjNjVlNDYwLTE2MzMtNGI0NC05ZGM1LWJlMzAzYzhi M2YwOS5jcmwwHwYDVR0jBBgwFoAUIKBv4EAvNx9ZAwDdlWdzMp9+zC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMw M2M4YjNmMDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3AAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAqc5MrtN+ZY0KBXCidqhD2ZKvtwyttjX/UTBXdI3rSYsQ2a/QfH SxlAjj+y9Bknr/EHL94jKXOb7CXwk15dbin7eqIJ9qRAslv4O/x1Dz6JWtbnHtN8 G/gKMQOWLUwUViSFY2HQOsMcaMrrfr7iuk4bCgQiAAiUN0pq+I9J8XewVPXzBObG nLSM3op6xMh9C413YnKThkk7g/a2PZ3sGkz602f0mLNLbu1vp8kOC9DY3csHFmU1 9AklFT+GiX5BYu5tC5EUeQ9AXfGG7j8OHXW1ADy3pvMiT8VbzbwUH5cK2RamL5Bt 7j9OmyLFj0+DCesMBxbj0sCfux8y0gWeTOk= -----END CERTIFICATE-----Generated at Sat Sep 26 07:23:36 2026 by rpki-client